Apresentação da nova Graph API do Facebook, esta que classifica e relaciona o conteúdo da rede social em forma de um grafo contendo objects e connections e seus correlacionamentos

1. fagner moura - @seufagner
graph api

3. old REST(?) api
https://api.facebook.com/method/[name]
• users.hasAppPermission
• users.isAppUser
• users.getLoggedInUser
• stream.publish ...

4. old REST(?) api
https://api.facebook.com/method/[name]
• users.hasAppPermission
• users.isAppUser
• users.getLoggedInUser
• stream.publish ...
session_key

5. old REST(?) api
https://api.facebook.com/method/[name]
• users.hasAppPermission
• users.isAppUser
• users.getLoggedInUser
• stream.publish ...
session_key

6. old REST(?) api
https://api.facebook.com/method/[name]
• users.hasAppPermission
• users.isAppUser
• users.getLoggedInUser
• stream.publish ...
session_key
deprecated

7. old REST api
https://api.facebook.com/method/[name]
• users.hasAppPermission
• users.isAppUser
• users.getLoggedInUser
• stream.publish ...
session_key
deprecated

8. old REST api
https://api.facebook.com/method/[name]
• users.hasAppPermission
• users.isAppUser
• users.getLoggedInUser
• stream.publish ...
session_key
deprecated

10. REST ?
• easy SOA
• resources
• only HTTP
• stateless

11. • lightweight
• simple
• readable
now, only json response

12. objects

13. user
page
message
status message
photo
video ... objects

14. user
page
message
status message
photo
video ... objects
https://graph.facebook.com/ID

15. user
page
message
status message
photo
video ... objects
https://graph.facebook.com/19292868552

16. user
page
message
status message
photo
video ... objects
https://graph.facebook.com/plataform

17. user
page
message
status message
photo
video ... objects
+
connections

18. user@connections

19. home
feed
posts
friends
picture
photos ... user@connections

20. home
feed
posts
friends
(public data)
picture
photos ... user@connections
https://graph.facebook.com/me/friends
https://graph.facebook.com/me/picture

21. home
feed
posts
friends
(read_stream permission)
picture
photos ... user@connections
https://graph.facebook.com/me/home
https://graph.facebook.com/me/feed

22. home
feed
posts
friends
(read_stream permission)
picture
photos ... user@connections
session_token?

23. home
feed
posts
friends
(read_stream permission)
picture
photos ... user@connections
access_token

24. home
feed
posts
friends
(user_photos permission)
picture
photos ... user@connections
access_token

25. • oauth 2.0
• server side
• client side
grant
permissions

27. • open protocol
• authentication
• widely used

28. • open protocol
• authentication
• widely used

29. • oauth 2.0
• server side
• client side
grant
permissions

30. • oauth server
• user
• application
actors

31. server side flow
App try to access OAuth Dialog
Facebook (App Authorization)
OAuth Dialog
(User Authentication)
curl -F 'client_id=113391995351148'
-F 'redirect_uri=http://facebook-buraco-debug.jogatina.com.....'
https://www.facebook.com/dialog/oauth

32. server side flow
App try to access OAuth Dialog
Facebook (App Authorization)
OAuth Dialog
(User Authentication)
curl -F 'client_id=113391995351148'
-F 'redirect_uri=http://facebook-buraco-debug.jogatina.com.....'
-F 'scope=email, read_stream'
https://www.facebook.com/dialog/oauth

33. server side flow
App try to access OAuth Dialog
Facebook (App Authorization)
OAuth Dialog
(User Authentication)
Cookie not found, show OAuth Dialog (facebook layout)

34. server side flow
App try to access OAuth Dialog
Facebook (App Authorization)
OAuth Dialog
(User Authentication)
goes to App authorization directly

35. server side flow
OAuth Dialog HTTP 302
(App Authorization) (redirect_url param)
OAuth Dialog
User Authentication)
don´t allow !
redirect with some params like: error_reason, error, etc.

36. server side flow
OAuth Dialog HTTP 302
(App Authorization) (redirect_url param)
OAuth Dialog
User Authentication)
allow !
redirect with authorization code param

37. server side flow
OAuth Dialog
http://mydomain...
) (App Authorization)
curl -F 'client_id=113391995351148'
-F 'redirect_uri=http://facebook-buraco-debug.jogatina.com.....'
-F 'client_secret=f8138690fe947221d4d2c071aa945395'
-F 'code=[authorization code here]'
https://graph.facebook.com/oauth/access_token

38. server side flow
http://mydomain... HTTP 400
)
{ "error": {
"type": "OAuthException",
"message": "Error validating verification code." }
}

39. server side flow
HTTP 302
http://mydomain...
) (redirect_url param)
Sucessfull authenticated !
access_token in the body of the request

40. • oauth 2.0
• server side
• client side
grant
permissions

41. client side flow
• desktop
• mobile
• javascript

42. client side flow
OAuth Dialog
HTTP request
(App Authorization)
curl -F 'client_id=113391995351148'
-F 'redirect_uri=http://facebook-buraco-debug.jogatina.com.....'
-F ‘response_type=token'
https://www.facebook.com.br/dialog/oauth

43. client side flow
HTTP 302
HTTP request
(redirect_url param)
Pass URI fragment with access_token
http://jogatina.com....#access_token=gzZ666a..&expires_in=64090

44. client side flow
HTTP request HTTP 400
{ "error": {
"type": "OAuthException",
"message": "Error validating verification code." }
}

45. services available
• reading
• searching
• publishing
• ...
curl -F ‘fields=id,name,picture'
-F ‘access_token=...'
https://graph.facebook.com/fagner.moura

46. services available
• reading
• searching
• publishing
• ...
curl -F ‘q=futebol'
-F ‘type=user'
https://graph.facebook.com/search

47. services available
• reading
• searching
• publishing
• ...
curl -F ‘message=Jogue no Jogatina hoje'
-F ‘access_token=...’
https://graph.facebook.com/fagner.moura/feed

48. services available
• reading
• searching
• publishing
• ...
paging deleting
insights
real time update

49. :-)
fagner moura - @seufagner